|
197 | 197 | }
|
198 | 198 | }
|
199 | 199 | },
|
200 |
| - "revision": "20230720", |
| 200 | + "revision": "20230728", |
201 | 201 | "rootUrl": "https://servicecontrol.googleapis.com/",
|
202 | 202 | "schemas": {
|
203 | 203 | "AllocateInfo": {
|
|
456 | 456 | "description": "The name of the service account key used to create or exchange credentials for authenticating the service account making the request. This is a scheme-less URI full resource name. For example: \"//iam.googleapis.com/projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/{key}\"",
|
457 | 457 | "type": "string"
|
458 | 458 | },
|
| 459 | + "serviceDelegationHistory": { |
| 460 | + "$ref": "ServiceDelegationHistory", |
| 461 | + "description": "Records the history of delegated resource access across Google services." |
| 462 | + }, |
459 | 463 | "thirdPartyPrincipal": {
|
460 | 464 | "additionalProperties": {
|
461 | 465 | "description": "Properties of the object.",
|
|
1751 | 1755 | },
|
1752 | 1756 | "type": "object"
|
1753 | 1757 | },
|
| 1758 | + "ServiceDelegationHistory": { |
| 1759 | + "description": "The history of delegation across multiple services as the result of the original user's action. Such as \"service A uses its own account to do something for user B\". This differs from ServiceAccountDelegationInfo, which only tracks the history of direct token exchanges (impersonation).", |
| 1760 | + "id": "ServiceDelegationHistory", |
| 1761 | + "properties": { |
| 1762 | + "originalPrincipal": { |
| 1763 | + "description": "The original end user who initiated the request to GCP.", |
| 1764 | + "type": "string" |
| 1765 | + }, |
| 1766 | + "serviceMetadata": { |
| 1767 | + "description": "Data identifying the service specific jobs or units of work that were involved in a chain of service calls.", |
| 1768 | + "items": { |
| 1769 | + "$ref": "ServiceMetadata" |
| 1770 | + }, |
| 1771 | + "type": "array" |
| 1772 | + } |
| 1773 | + }, |
| 1774 | + "type": "object" |
| 1775 | + }, |
| 1776 | + "ServiceMetadata": { |
| 1777 | + "description": "Metadata describing the service and additional service specific information used to identify the job or unit of work at hand.", |
| 1778 | + "id": "ServiceMetadata", |
| 1779 | + "properties": { |
| 1780 | + "jobMetadata": { |
| 1781 | + "additionalProperties": { |
| 1782 | + "description": "Properties of the object.", |
| 1783 | + "type": "any" |
| 1784 | + }, |
| 1785 | + "description": "Additional metadata provided by service teams to describe service specific job information that was triggered by the original principal.", |
| 1786 | + "type": "object" |
| 1787 | + }, |
| 1788 | + "principalSubject": { |
| 1789 | + "description": "A string representing the principal_subject associated with the identity. For most identities, the format will be `principal://iam.googleapis.com/{identity pool name}/subject/{subject)` except for some GKE identities (GKE_WORKLOAD, FREEFORM, GKE_HUB_WORKLOAD) that are still in the legacy format `serviceAccount:{identity pool name}[{subject}]` If the identity is a Google account (e.g. workspace user account or service account), this will be the email of the prefixed by `serviceAccount:`. For example: `serviceAccount:[email protected]`. If the identity is an individual user, the identity will be formatted as: `user:[email protected]`.", |
| 1790 | + "type": "string" |
| 1791 | + }, |
| 1792 | + "serviceDomain": { |
| 1793 | + "description": "The service's fully qualified domain name, e.g. \"dataproc.googleapis.com\".", |
| 1794 | + "type": "string" |
| 1795 | + } |
| 1796 | + }, |
| 1797 | + "type": "object" |
| 1798 | + }, |
1754 | 1799 | "SpanContext": {
|
1755 | 1800 | "description": "The context of a span. This is attached to an Exemplar in Distribution values during aggregation. It contains the name of a span with format: projects/[PROJECT_ID_OR_NUMBER]/traces/[TRACE_ID]/spans/[SPAN_ID]",
|
1756 | 1801 | "id": "SpanContext",
|
|
0 commit comments